Skip to content

chore: dev to main PR#823

Draft
Ragini-Microsoft wants to merge 31 commits intomainfrom
dev
Draft

chore: dev to main PR#823
Ragini-Microsoft wants to merge 31 commits intomainfrom
dev

Conversation

@Ragini-Microsoft
Copy link
Copy Markdown
Collaborator

@Ragini-Microsoft Ragini-Microsoft commented Apr 23, 2026

Purpose

This pull request updates the project to reflect a new frontend directory structure (src/app/frontend and src/app/frontend-server are now under src/App and src/App/server), upgrades various GitHub Actions and Bicep module versions, and introduces improved test coverage reporting in CI. These changes improve maintainability, keep dependencies up-to-date, and enhance CI/CD feedback.

Directory Structure Updates:

  • Updated all workflow and configuration references from src/app/frontend and src/app/frontend-server to src/App and src/App/server to match the new frontend directory structure. This affects Docker build contexts, deployment scripts, documentation, and Azure configuration files. [1] [2] [3] [4] [5] [6] [7] [8] [9]

CI/CD Pipeline Improvements:

  • Upgraded multiple GitHub Actions to their latest major versions for improved reliability and security, including actions/checkout, docker/setup-buildx-action, docker/build-push-action, actions/upload-artifact, and others. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10]
  • Updated third-party action versions for broken-link checking and semantic PR title enforcement. [1] [2] [3] [4]

Test and Coverage Enhancements:

  • Added a step to post backend test coverage as a PR comment using pytest-coverage-comment, and updated test permissions to allow commenting on pull requests. [1] [2]

Infrastructure Module Updates:

  • Upgraded Bicep module versions for networking, storage, cognitive services, and Cosmos DB for improved features and bug fixes. Also updated the API version for AI Search connections. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10]

Other Configuration Changes:

  • Removed the bicep required version constraint from azure.yaml.

Does this introduce a breaking change?

  • Yes
  • No

Golden Path Validation

  • I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

  • I have validated the deployment process successfully and all services are running as expected with this change.

dependabot Bot and others added 19 commits March 2, 2026 00:35
@dependabot @github-actions
build: bump the npm-deps group across 2 directories with 18 updates
9e541fe 
Bumps the npm-deps group with 16 updates in the /content-gen/src/app/frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@fluentui/react-components](https://github.com/microsoft/fluentui) | `9.72.7` | `9.73.1` |
| [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons) | `2.0.315` | `2.0.320` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.4` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.27` | `19.2.14` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.4` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.7` | `19.2.3` |
| [react-markdown](https://github.com/remarkjs/react-markdown) | `9.1.0` | `10.1.0` |
| [uuid](https://github.com/uuidjs/uuid) | `10.0.0` | `13.0.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.1` | `25.3.3` |
| [@types/uuid](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/uuid) | `10.0.0` | `11.0.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `7.18.0` | `8.56.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.18.0` | `8.56.1` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.7.0` | `5.1.4` |
| [eslint](https://github.com/eslint/eslint) | `8.57.1` | `10.0.2` |
| [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `4.6.2` | `7.0.1` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.4.24` | `0.5.2` |

Bumps the npm-deps group with 2 updates in the /content-gen/src/app/frontend-server directory: [express](https://github.com/expressjs/express) and [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware).


Updates `@fluentui/react-components` from 9.72.7 to 9.73.1
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react-components_v9.72.7...@fluentui/react-components_v9.73.1)

Updates `@fluentui/react-icons` from 2.0.315 to 2.0.320
- [Changelog](https://github.com/microsoft/fluentui-system-icons/blob/main/docs/releases.md)
- [Commits](https://github.com/microsoft/fluentui-system-icons/commits)

Updates `react` from 18.3.1 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react)

Updates `@types/react` from 18.3.27 to 19.2.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 18.3.1 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom)

Updates `@types/react-dom` from 18.3.7 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-markdown` from 9.1.0 to 10.1.0
- [Release notes](https://github.com/remarkjs/react-markdown/releases)
- [Changelog](https://github.com/remarkjs/react-markdown/blob/main/changelog.md)
- [Commits](remarkjs/react-markdown@9.1.0...10.1.0)

Updates `uuid` from 10.0.0 to 13.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v10.0.0...v13.0.0)

Updates `@types/node` from 24.10.1 to 25.3.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 18.3.27 to 19.2.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 18.3.7 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@types/uuid` from 10.0.0 to 11.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/uuid)

Updates `@typescript-eslint/eslint-plugin` from 7.18.0 to 8.56.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 7.18.0 to 8.56.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/parser)

Updates `@vitejs/plugin-react` from 4.7.0 to 5.1.4
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.4/packages/plugin-react)

Updates `eslint` from 8.57.1 to 10.0.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.57.1...v10.0.2)

Updates `eslint-plugin-react-hooks` from 4.6.2 to 7.0.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)

Updates `eslint-plugin-react-refresh` from 0.4.24 to 0.5.2
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.4.24...v0.5.2)

Updates `express` from 4.22.1 to 5.2.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@v4.22.1...v5.2.1)

Updates `http-proxy-middleware` from 2.0.9 to 3.0.5
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/master/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v2.0.9...v3.0.5)

---
updated-dependencies:
- dependency-name: "@fluentui/react-components"
  dependency-version: 9.73.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: "@fluentui/react-icons"
  dependency-version: 2.0.320
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: react
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@types/react"
  dependency-version: 19.2.14
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: react-dom
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: react-markdown
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: uuid
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@types/node"
  dependency-version: 25.3.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@types/react"
  dependency-version: 19.2.14
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@types/uuid"
  dependency-version: 11.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.56.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.56.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 5.1.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: eslint
  dependency-version: 10.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: eslint-plugin-react-hooks
  dependency-version: 7.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: http-proxy-middleware
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github-actions
build: bump the python-deps group across 3 directories with 4 updates
20d9c8b 
Updates the requirements on [azure-ai-projects](https://github.com/Azure/azure-sdk-for-python), [azure-identity](https://github.com/Azure/azure-sdk-for-python), [ansible-core](https://github.com/ansible/ansible) and [agent-framework](https://github.com/microsoft/agent-framework) to permit the latest version.

Updates `azure-ai-projects` from 1.0.0b12 to 2.0.0b4
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-ai-projects_1.0.0b12...azure-ai-projects_2.0.0b4)

Updates `azure-identity` from 1.20.0 to 1.25.2
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.20.0...azure-identity_1.25.2)

Updates `ansible-core` to 2.20.3
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](ansible/ansible@v2.17.0...v2.20.3)

Updates `agent-framework` from 1.0.0b260114 to 1.0.0rc2
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](microsoft/agent-framework@python-1.0.0b260114...python-1.0.0rc2)

Updates `agent-framework` from 1.0.0b260114 to 1.0.0rc2
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](microsoft/agent-framework@python-1.0.0b260114...python-1.0.0rc2)

---
updated-dependencies:
- dependency-name: azure-ai-projects
  dependency-version: 2.0.0b4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-deps
- dependency-name: azure-identity
  dependency-version: 1.25.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: ansible-core
  dependency-version: 2.20.3
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: agent-framework
  dependency-version: 1.0.0rc2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: agent-framework
  dependency-version: 1.0.0rc2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github-actions
build: bump the github-actions group with 7 updates
2aa55e5 
Bumps the github-actions group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [microsoft/template-validation-action](https://github.com/microsoft/template-validation-action) | `0.4.3` | `0.4.4` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `47.0.1` | `47.0.4` |
| [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) | `2.7.0` | `2.8.0` |
| [codfish/semantic-release-action](https://github.com/codfish/semantic-release-action) | `3` | `5` |
| [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) | `5` | `6` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6` | `7` |


Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

Updates `microsoft/template-validation-action` from 0.4.3 to 0.4.4
- [Release notes](https://github.com/microsoft/template-validation-action/releases)
- [Commits](microsoft/template-validation-action@v0.4.3...v0.4.4)

Updates `tj-actions/changed-files` from 47.0.1 to 47.0.4
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@e002140...7dee1b0)

Updates `lycheeverse/lychee-action` from 2.7.0 to 2.8.0
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](lycheeverse/lychee-action@v2.7.0...v2.8.0)

Updates `codfish/semantic-release-action` from 3 to 5
- [Release notes](https://github.com/codfish/semantic-release-action/releases)
- [Changelog](https://github.com/codfish/semantic-release-action/blob/main/RELEASE_NOTES_V5.md)
- [Commits](codfish/semantic-release-action@v3...v5)

Updates `amannn/action-semantic-pull-request` from 5 to 6
- [Release notes](https://github.com/amannn/action-semantic-pull-request/releases)
- [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md)
- [Commits](amannn/action-semantic-pull-request@v5...v6)

Updates `actions/upload-artifact` from 6 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: microsoft/template-validation-action
  dependency-version: 0.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: tj-actions/changed-files
  dependency-version: 47.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: lycheeverse/lychee-action
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: codfish/semantic-release-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: amannn/action-semantic-pull-request
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github-actions
build: bump the github-actions group with 4 updates
0ac9732 
Bumps the github-actions group with 4 updates: [tj-actions/changed-files](https://github.com/tj-actions/changed-files), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [docker/build-push-action](https://github.com/docker/build-push-action) and [docker/login-action](https://github.com/docker/login-action).


Updates `tj-actions/changed-files` from 47.0.4 to 47.0.5
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@7dee1b0...22103cc)

Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@v3...v4)

Updates `docker/build-push-action` from 6 to 7
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v6...v7)

Updates `docker/login-action` from 3 to 4
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v3...v4)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-version: 47.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@Shubhangi-Microsoft
refactor: UI code cleanup and folder restructure
bb4eabf
@Rafi-Microsoft
Add pytest coverage comment to PRs
a8a8125 
Add MishaKav/pytest-coverage-comment action to post code coverage
summary as a PR comment. Changes include:
- Add pull-requests: write permission
- Add --junitxml=pytest.xml flag for test summary
- Add coverage comment step with per-file breakdown

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@Shubhangi-Microsoft
Merge branch 'dev' of https://github.com/microsoft/content-generation…
f8bf49a 
…-solution-accelerator into psl-ui-refractoring

# Please enter a commit message to explain why this merge is necessary,
# especially if it merges an updated upstream into a topic branch.
#
# Lines starting with '#' will be ignored, and an empty message aborts
# the commit.
@Ragini-Microsoft
Merge branch 'dev' into rc-dependabotchanges
338442f
@Ragini-Microsoft
fix: update server.js for Express 5 and http-proxy-middleware v3 comp…
4f183a1 
…atibility
@Roopan-Microsoft
Merge pull request #816 from microsoft/psl-add-coverage-pr-comment
76e63ed 
feat: Add pytest coverage comment to PRs
@Roopan-Microsoft
Merge pull request #814 from microsoft/psl-ui-refractoring
e03e3ae 
refactor: UI code cleanup and folder restructure
@Ragini-Microsoft
Merge branch 'dev' of https://github.com/microsoft/content-generation…
e11b916 
…-solution-accelerator into dependabotchanges
@Ragini-Microsoft
updated the dependabot packages
ea02b51
@Ragini-Microsoft
fix: correct route definition for SPA support in server.js
1d3c341
@Roopan-Microsoft
Merge pull request #819 from microsoft/rc-dependabot-changes
33c9f90 
fix: Update dependabot packages
@Dhruvkumar-Microsoft
Removed the bicep paramater
4ce0d68 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@Akhileswara-Microsoft
Update Bicep modules and resources to latest versions
e535e24 
- Updated private DNS zone module from version 0.8.0 to 0.8.1.
- Updated AI Foundry AI Services module from version 0.14.1 to 0.14.2.
- Updated AI Services private endpoint module from version 0.11.1 to 0.12.0.
- Updated AI Search connection resource API version from 2025-09-01 to 2025-12-01.
- Updated storage account module from version 0.31.1 to 0.32.0.
- Updated Cosmos DB module from version 0.18.0 to 0.19.0.
- Updated cognitive service reference resource API version from 2025-10-01-preview to 2025-12-01.
- Updated AI project resource API version from 2025-10-01-preview to 2025-12-01.
- Updated telemetry resource API version from 2024-03-01 to 2025-04-01.
- Updated AI services resource API version in model deployment from 2025-04-01-preview to 2025-12-01.
- Updated existing AI services resource API version from 2025-10-01-preview to 2025-12-01.
- Updated NSG module from version 0.5.2 to 0.5.3.
- Updated virtual network module from version 0.7.2 to 0.8.0.
- Updated managed identity types import from version 0.5.1 to 0.7.0.
- Updated private endpoint module in web sites from version 0.11.1 to 0.12.0.
@Roopan-Microsoft
Merge pull request #821 from microsoft/AVM_Bicep_Versions_Update_Akhi…
b5bb2db 
…leswara

fix: Update Bicep and AVM Modules
@Roopan-Microsoft
Merge pull request #820 from microsoft/feature/remove-bicep-version
bcc61af 
fix: removed the bicep parameter
@Ragini-Microsoft Ragini-Microsoft marked this pull request as draft April 24, 2026 10:40
Shubhangi-Microsoft and others added 3 commits April 24, 2026 17:10
@Shubhangi-Microsoft
fix: resolve Dependabot security alerts (vite, picomatch, path-to-reg…
e618f1c 
…exp)

- vite: 7.3.1 -> 7.3.2 (fixes arbitrary file read via WebSocket, server.fs.deny bypass, path traversal in optimized deps)
- picomatch: updated in both frontend and frontend-server (fixes ReDoS via extglob quantifiers, method injection in POSIX character classes)
- path-to-regexp: updated in frontend-server (fixes ReDoS via multiple route parameters)
- brace-expansion: updated in frontend (fixes DoS via zero-step sequence)

Resolves Dependabot alerts #177, #179, #180, #181, #183, #185, #186, #187
@Shubhangi-Microsoft
fix: resolve dependabot security alerts - upgrade uuid to v14
06d3daa 
- uuid: 13.x -> 14.x (fixes GHSA-w5hq-g745-h8pq - missing buffer bounds check in v3/v5/v6)

- Vite, picomatch, path-to-regexp, follow-redirects alerts resolved via dev merge
@Avijit-Microsoft
fix: resolve Dependabot security alerts (vite, picomatch, path-to-reg…
ca921f2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner

@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner

@Prajwal-Microsoft Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft Prajwal-Microsoft is a code owner

@aniaroramsft aniaroramsft Awaiting requested review from aniaroramsft aniaroramsft is a code owner

@Vinay-Microsoft Vinay-Microsoft Awaiting requested review from Vinay-Microsoft Vinay-Microsoft is a code owner

@malrose07 malrose07 Awaiting requested review from malrose07 malrose07 is a code owner

@toherman-msft toherman-msft Awaiting requested review from toherman-msft toherman-msft is a code owner

@nchandhi nchandhi Awaiting requested review from nchandhi nchandhi is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

9 participants

@Ragini-Microsoft @Roopan-Microsoft @Pavan-Microsoft @Avijit-Microsoft @Shubhangi-Microsoft @Rafi-Microsoft @Dhruvkumar-Microsoft @Akhileswara-Microsoft